Track gateway requires the logged-in user JWT in addition to appKey/timestamp/sign headers. Capture token before async enqueue so background sync still works.
Co-authored-by: Cursor <cursoragent@cursor.com>
Track SignatureValidationFilter reads appKey/timestamp/sign from headers, not query. Reverts e642f08 query transport and aligns debug script.
Co-authored-by: Cursor <cursoragent@cursor.com>